commit 4ea78e81d7e2e33e2a9ae58577f989be87938a7e
OBS-URL: https://build.opensuse.org/package/show/Kernel:stable/kernel-source?expand=0&rev=1363
This commit is contained in:
parent
10e824e3ea
commit
1f73c02ada
@ -1,3 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:e4160c85faaa409d13a17c3b8d779b34fec466a6b25d84c36209f5a738d3db42
|
||||
size 274408
|
||||
oid sha256:1d618f95cbd89794b31178495b850a138e36e1184977276dd1a357f41f6d328e
|
||||
size 274582
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -31,7 +31,7 @@
|
||||
Name: dtb-aarch64
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -31,7 +31,7 @@
|
||||
Name: dtb-armv6l
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -31,7 +31,7 @@
|
||||
Name: dtb-armv7l
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -31,7 +31,7 @@
|
||||
Name: dtb-riscv64
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%obsolete_rebuilds %name
|
||||
Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz
|
||||
Source2: source-post.sh
|
||||
@ -820,6 +820,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -950,6 +959,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1214,13 +1227,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -675,6 +675,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -805,6 +814,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1068,13 +1081,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -11,9 +11,15 @@ modules in the %{-n*}-kmp packages.
|
||||
if ! command -v mokutil >/dev/null; then
|
||||
exit 0
|
||||
fi
|
||||
# Only apply CA check on the kernel package certs (bsc#1173115)
|
||||
if [ %{defined _suse_kernel_module_subpackage} = 0 ] && mokutil -h | grep -q "ca-check"; then
|
||||
MOK_ARG="--ca-check"
|
||||
else
|
||||
MOK_ARG=""
|
||||
fi
|
||||
# XXX: Only call mokutil if UEFI and shim are used
|
||||
for cert in @CERTS@; do
|
||||
if ! mokutil --import "$cert" --root-pw; then
|
||||
if ! mokutil --import "$cert" --root-pw ${MOK_ARG}; then
|
||||
echo "Failed to import $cert"
|
||||
fi
|
||||
done
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%ifarch ppc64
|
||||
Provides: kernel-kdump = 2.6.28
|
||||
Obsoletes: kernel-kdump <= 2.6.28
|
||||
@ -826,6 +826,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -956,6 +965,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1226,13 +1239,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%ifarch %ix86
|
||||
Provides: kernel-smp = 2.6.17
|
||||
Obsoletes: kernel-smp <= 2.6.17
|
||||
@ -869,6 +869,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -999,6 +1008,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1308,13 +1321,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -33,7 +33,7 @@ License: GPL-2.0
|
||||
Group: Documentation/Man
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -63,7 +63,7 @@ BuildRequires: texlive-zapfding
|
||||
%endif
|
||||
Url: http://www.kernel.org/
|
||||
Provides: %name = %version-%source_rel
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
BuildArch: noarch
|
||||
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||
Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%obsolete_rebuilds %name
|
||||
Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz
|
||||
Source2: source-post.sh
|
||||
@ -824,6 +824,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -954,6 +963,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1222,13 +1235,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%obsolete_rebuilds %name
|
||||
Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz
|
||||
Source2: source-post.sh
|
||||
@ -818,6 +818,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -948,6 +957,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1210,13 +1223,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -45,7 +45,7 @@ BuildRequires: util-linux
|
||||
%endif
|
||||
%endif
|
||||
%endif
|
||||
BuildRequires: kernel%kernel_flavor-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
BuildRequires: kernel%kernel_flavor-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
|
||||
%if 0%{?rhel_version}
|
||||
BuildRequires: kernel
|
||||
@ -66,7 +66,7 @@ License: GPL-2.0
|
||||
Group: SLES
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -38,7 +38,7 @@ License: GPL-2.0
|
||||
Group: SLES
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%ifarch %ix86
|
||||
Provides: kernel-bigsmp = 2.6.17
|
||||
Obsoletes: kernel-bigsmp <= 2.6.17
|
||||
@ -846,6 +846,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -976,6 +985,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1264,13 +1277,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -32,7 +32,7 @@ License: GPL-2.0
|
||||
Group: Development/Sources
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -43,7 +43,7 @@ BuildRequires: fdupes
|
||||
BuildRequires: sed
|
||||
Requires(post): coreutils sed
|
||||
Provides: %name = %version-%source_rel
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: linux
|
||||
Provides: multiversion(kernel)
|
||||
Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -27,7 +27,7 @@ Group: Development/Sources
|
||||
Version: 5.8.10
|
||||
%if %using_buildservice
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -52,7 +52,7 @@ Requires: kernel-pae-devel = %version-%source_rel
|
||||
%endif
|
||||
Requires: pesign-obs-integration
|
||||
Provides: %name = %version-%source_rel
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: multiversion(kernel)
|
||||
Source: README.KSYMS
|
||||
Requires: kernel-devel%variant = %version-%source_rel
|
||||
@ -60,6 +60,11 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||
ExclusiveArch: %ix86 aarch64 armv6hl armv7hl ppc64 ppc64le riscv64 s390x x86_64
|
||||
Prefix: /usr/src
|
||||
|
||||
# Force bzip2 instead of lzma compression to
|
||||
# 1) allow install on older dist versions, and
|
||||
# 2) decrease build times (bsc#962356 boo#1175882)
|
||||
%define _binary_payload w9.bzdio
|
||||
|
||||
%description
|
||||
Kernel symbols, such as functions and variables, have version
|
||||
information attached to them. This package contains the symbol versions
|
||||
|
@ -49,6 +49,11 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||
ExclusiveArch: @ARCHS@
|
||||
Prefix: /usr/src
|
||||
|
||||
# Force bzip2 instead of lzma compression to
|
||||
# 1) allow install on older dist versions, and
|
||||
# 2) decrease build times (bsc#962356 boo#1175882)
|
||||
%define _binary_payload w9.bzdio
|
||||
|
||||
%description
|
||||
Kernel symbols, such as functions and variables, have version
|
||||
information attached to them. This package contains the symbol versions
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%obsolete_rebuilds %name
|
||||
Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz
|
||||
Source2: source-post.sh
|
||||
@ -817,6 +817,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -947,6 +956,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1208,13 +1221,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -1,3 +1,9 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 22 11:36:53 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
|
||||
- commit ecaf78d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -7,6 +13,26 @@ Mon Sep 21 13:00:19 CEST 2020 - jslaby@suse.cz
|
||||
Add a reference.
|
||||
- commit af3e800
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 12:44:24 CEST 2020 - tiwai@suse.de
|
||||
|
||||
- Update config files: turn off CONFIG_SND_CTL_VALIDATION again (bsc#1176200)
|
||||
This causes errors on ASoC SOF driver.
|
||||
- commit b7791aa
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 21 03:15:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115)
|
||||
To avoid the unnecessary key enrollment, when enrolling the signing key
|
||||
of the kernel package, "--ca-check" is added to mokutil so that mokutil
|
||||
will ignore the request if the CA of the signing key already exists in
|
||||
MokList or UEFI db.
|
||||
Since the macro, %_suse_kernel_module_subpackage, is only defined in a
|
||||
kernel module package (KMP), it's used to determine whether the %post
|
||||
script is running in a kernel package, or a kernel module package.
|
||||
- commit b15c9bf
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -14,6 +40,15 @@ Fri Sep 18 06:36:01 CEST 2020 - jslaby@suse.cz
|
||||
(git-fixes).
|
||||
- commit 33939e8
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 03:33:11 CEST 2020 - glin@suse.com
|
||||
|
||||
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698)
|
||||
The "-c" option wasn't passed down to %_kernel_module_package so the
|
||||
ueficert subpackage wasn't generated even if the certificate is
|
||||
specified in the spec file.
|
||||
- commit 34808fb
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 19:44:40 CEST 2020 - jslaby@suse.cz
|
||||
|
||||
@ -649,6 +684,20 @@ Thu Sep 10 07:39:06 CEST 2020 - jslaby@suse.cz
|
||||
(bsc#1012628).
|
||||
- commit 8b2a0ec
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 8 15:33:35 CEST 2020 - mbenes@suse.cz
|
||||
|
||||
- rpm/kernel-binary.spec.in: pack .ipa-clones files for live patching
|
||||
When -fdump-ipa-clones option is enabled, GCC reports about its cloning
|
||||
operation during IPA optimizations. We use the information for live
|
||||
patches preparation, because it is crucial to know if and how functions
|
||||
are optimized.
|
||||
Currently, we create the needed .ipa-clones dump files manually. It is
|
||||
unnecessary, because the files may be created automatically during our
|
||||
kernel build. Prepare for the step and provide the resulting files in
|
||||
-livepatch-devel package.
|
||||
- commit 98e5a9d
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Sep 7 14:34:36 CEST 2020 - msuchanek@suse.de
|
||||
|
||||
|
@ -51,7 +51,7 @@
|
||||
|
||||
# Define some CONFIG variables as rpm macros as well. (rpm cannot handle
|
||||
# defining them all at once.)
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB
|
||||
%define config_vars CONFIG_MODULES CONFIG_MODULE_SIG CONFIG_KMSG_IDS CONFIG_SUSE_KERNEL_SUPPORTED CONFIG_EFI_STUB CONFIG_LIVEPATCH_IPA_CLONES
|
||||
%{expand:%(eval "$(test -n "%cpu_arch_flavor" && tar -xjf %_sourcedir/config.tar.bz2 --to-stdout config/%cpu_arch_flavor)"; for config in %config_vars; do echo "%%global $config ${!config:-n}"; done)}
|
||||
%define split_extra (%CONFIG_MODULES == "y" && %CONFIG_SUSE_KERNEL_SUPPORTED == "y")
|
||||
%if %CONFIG_MODULES != "y"
|
||||
@ -70,7 +70,7 @@ License: GPL-2.0
|
||||
Group: System/Kernel
|
||||
Version: 5.8.10
|
||||
%if 0%{?is_kotd}
|
||||
Release: <RELEASE>.gaf3e800
|
||||
Release: <RELEASE>.g4ea78e8
|
||||
%else
|
||||
Release: 0
|
||||
%endif
|
||||
@ -179,10 +179,10 @@ Conflicts: hyper-v < 4
|
||||
Conflicts: libc.so.6()(64bit)
|
||||
%endif
|
||||
Provides: kernel = %version-%source_rel
|
||||
Provides: kernel-%build_flavor-base-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: kernel-%build_flavor-base-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
Provides: kernel-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
# END COMMON DEPS
|
||||
Provides: %name-srchash-af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
Provides: %name-srchash-4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
%obsolete_rebuilds %name
|
||||
Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz
|
||||
Source2: source-post.sh
|
||||
@ -820,6 +820,15 @@ if [ %CONFIG_MODULES = y ]; then
|
||||
# List of symbols that are used to generate kernel livepatches
|
||||
%if 0%{?klp_symbols}
|
||||
cp Symbols.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/Symbols.list > %my_builddir/livepatch-files.no_dir
|
||||
|
||||
%if %CONFIG_LIVEPATCH_IPA_CLONES == "y"
|
||||
find %kernel_build_dir -name "*.ipa-clones" ! -size 0 | sed -e 's|^%kernel_build_dir/||' > ipa-clones.list
|
||||
cp ipa-clones.list %rpm_install_dir/%cpu_arch/%build_flavor
|
||||
echo %obj_install_dir/%cpu_arch/%build_flavor/ipa-clones.list >> %my_builddir/livepatch-files.no_dir
|
||||
tar -C %kernel_build_dir --verbatim-files-from -T ipa-clones.list -cf- | tar -C %rpm_install_dir/%cpu_arch/%build_flavor -xvf-
|
||||
cat ipa-clones.list | sed -e 's|^|%obj_install_dir/%cpu_arch/%build_flavor/|' >> %my_builddir/livepatch-files.no_dir
|
||||
%endif
|
||||
%endif
|
||||
|
||||
# Table of types used in exported symbols (for modversion debugging).
|
||||
@ -950,6 +959,10 @@ add_dirs_to_filelist() {
|
||||
}
|
||||
|
||||
# Collect the file lists.
|
||||
if [ -f %my_builddir/livepatch-files.no_dir ] ; then
|
||||
cat %my_builddir/livepatch-files.no_dir | add_dirs_to_filelist > %my_builddir/livepatch-files
|
||||
fi
|
||||
|
||||
shopt -s nullglob dotglob
|
||||
> %my_builddir/kernel-devel.files
|
||||
for file in %buildroot/boot/symtypes* %buildroot/lib/modules/*/{build,source}; do
|
||||
@ -1214,13 +1227,7 @@ kernel symbols and its respective kernel object . This list is to be used by
|
||||
the klp-convert tool, which helps livepatch developers by enabling automatic
|
||||
symbol resolution.
|
||||
|
||||
%files %{livepatch}-devel
|
||||
%defattr(-, root, root)
|
||||
%dir %obj_install_dir
|
||||
%dir %obj_install_dir/%cpu_arch
|
||||
%dir %obj_install_dir/%cpu_arch_flavor/
|
||||
%obj_install_dir/%cpu_arch_flavor/Symbols.list
|
||||
|
||||
%files %{livepatch}-devel -f livepatch-files
|
||||
%endif
|
||||
|
||||
%if %CONFIG_SUSE_KERNEL_SUPPORTED == "y"
|
||||
|
@ -82,9 +82,9 @@ esac)
|
||||
|
||||
# kernel_module_package: simply pass on all options and arguments.
|
||||
%kernel_module_package(n:v:r:t:f:xp:bc:) \
|
||||
%{expand:%%_kernel_module_package %{-x:-X} %{-n} %{-v} %{-r} %{-t} %{-f} %{-p} %{-b} %*}
|
||||
%{expand:%%_kernel_module_package %{-x:-X} %{-n} %{-v} %{-r} %{-t} %{-f} %{-p} %{-b} %{-c} %*}
|
||||
|
||||
# suse_kernel_module_package: invert the meaning of the -x flag. (You are not
|
||||
# supposed to understand why a simple %{-x:}%{!-x:-x} won't work.)
|
||||
%suse_kernel_module_package(n:v:r:s:f:xp:bc:) \
|
||||
%{expand:%%_kernel_module_package %{-x: }%{!-x:-X} %{-n} %{-v} %{-r} %{-s:-t %{-s*}} %{-f} %{-p} %{-b} %*}
|
||||
%{expand:%%_kernel_module_package %{-x: }%{!-x:-X} %{-n} %{-v} %{-r} %{-s:-t %{-s*}} %{-f} %{-p} %{-b} %{-c} %*}
|
||||
|
@ -1,3 +1,3 @@
|
||||
2020-09-21 11:00:19 +0000
|
||||
GIT Revision: af3e800080ea43fbe9f7197f1b859aa8faafdcda
|
||||
2020-09-22 11:01:27 +0000
|
||||
GIT Revision: 4ea78e81d7e2e33e2a9ae58577f989be87938a7e
|
||||
GIT Branch: stable
|
||||
|
Loading…
Reference in New Issue
Block a user